defguard
  • Welcome
  • Getting help
  • About
    • About defguard
    • Features overview
  • Getting started
    • One-line install script
  • Admin Features
    • Overview
    • Zero-Trust VPN with 2FA/MFA
      • Create/manage VPN Location
      • Network overview
      • Executing custom gateway commands
      • Multi-Factor Authentication (MFA/2FA)
        • MFA Architecture
      • Remote desktop client configuration
      • DNS and domains
    • Remote user enrollment
      • User onboarding after enrollment
    • SSO (OpenID Connect)
      • Portainer
      • Grafana setup
      • Proxmox
      • Matrix / Synapse
      • Django
      • MinIO
      • Vault
    • SMTP for email notifications
    • YubiKey Provisioning
    • Webhooks
    • Forward auth
    • SSH Authentication
    • Network devices
    • Activity & Audit logs
    • Gateway notifications
    • New version notifications
  • User features
    • Overwiew
    • Desktop Client
    • CLI Client
    • Configuring VPN
      • Defguard Desktop Client
        • Update instance
      • Other WireGuard® Clients
        • Configuring a device for new VPN Location manually
    • Password change / Reset
    • Enrollment & Onboarding
      • With internal Defguard SSO
      • With external SSO (Google/Microsoft/Custom)
    • Setting up 2FA/MFA
  • Enterprise Features
    • Overview
    • Enteprise features
      • Automatic (real time) desktop client configuration & sync
      • External OpenID providers
        • Google
        • Microsoft
        • Zitadel
        • Keycloak
        • JumpCloud
        • Okta
        • Custom
      • External OIDC secure enrollment
      • VPN & Client behavior customization
      • Access Control List
        • ACL Aliases
        • Implementation Details
      • Audit Log Streaming to SIEM systems
        • Supported SIEM systems integrations
          • Vector integration guide
          • Logstash integration guide
      • LDAP and Active Directory integration
        • Configuration
        • Settings table
        • Two-way LDAP and Active Directory synchronization
      • REST API
  • Deployment strategies
    • Prerequisites
    • Standalone package based installation
    • Docker images and tags
    • Docker Compose
    • Kubernetes
    • Terraform
    • High Availability and Failover
    • Upgrading
    • Pre-production and development releases
    • Gateway
      • Running gateway on MikroTik routers
  • Securing gRPC communication
  • OpenID RSA key
  • Health check
  • Configuration
  • Tutorials
    • Step by step setting up a VPN server
      • Adding additional VPN locations
  • In depth
    • Architecture
      • How do VPN statistics work
      • Security concepts
    • Roadmap
    • Release cycle
  • For Developers
    • Contributing
    • Environment setup
      • Translations (core/web)
        • Switching language
        • Adding translations
      • Translations (client)
        • Adding translations
  • Resources
    • Troubleshooting Guide
      • Sending support information
      • Client Windows installer exit codes
      • Client "All traffic" connection issues
      • WebAuthn security keys
Powered by GitBook
On this page
  • Enterprise is free up to certain limits
  • Purchasing the license
  • Configuring defguard with obtained license

Was this helpful?

Edit on GitHub
  1. Enterprise Features

Overview

PreviousSetting up 2FA/MFANextEnteprise features

Last updated 2 months ago

Was this helpful?

Defguard Enterprise offers a lot of functionalities that are not offered in the Open Source Open Core, like external OpenID Connect/SSO support, automatic&real time desktop client synchronization and configuration, and much more (go to to see more).

Enterprise is free up to certain limits

From release 1.1.0 all enterprise features up to the following limits are free and no license is required:

  • 5 active users

  • 10 devices

  • 1 location

Those limits should be more then enough for small businesses, home-labs or just to test out Enterprise features before committing.

At the moment your instance exceeds any of the limits, you will receive a relevant notification in the interface. Defguard will remain fully operational, and all Open Source functionalities will be available. Only the enterprise functionalities will be disabled until you activate the license.

Purchasing the license

If you would like to purchase a license, we offer two types of licenses:

  1. Subscription that can be bought on

  2. Offline (which will not contact our license server) with a defined custom period can be bought directly, please contact: sales @ defguard.net

Subscription

You can buy a monthly (soon yearly) subscription on our website: .

After purchasing:

  1. The license will be emailed to you on the email defined in the purchase form. Also there will be a second email with the invoice.

  2. Each month (on the date the license expires) defguard core will contact our licensing server and if the monthly payment was successful, our licensing server will automatically issue a new license and the enterprise plan will be extended to new date.

Offline license

Defguard is build with the highest security architecture in mind, thus there may be scenarios where you don't want any of the components to contact external services (eg. defguard core will have no access to Internet).

Offline license can be also issued for any period of time, so another scenario is that you can buy the enterprise license for any duration you wish.

To obtain an offline Enterprise License please contact our sales at: sales [ a t ] defguard.net and provide:

  • the period for which you would like to obtain the license

  • your company data and contact email address (for billing and license sharing)

  • preferred payment method: bank wire transfer or card payment link

Configuring defguard with obtained license

To configure defguard with the received license, please go to Settings -> enter the license in the Enterprise License configuration window -> Click Save.

The license will be validated and detailed information about the license will be diplayed (validity period and the license type):

If your setup / firewall / network policy doesn't allow that defguard will contact our licensing server, please contact us for the .

All Enterprise Features
https://defguard.net/pricing/
https://defguard.net/pricing/
Offline license
defguard enterprise license settings